38b3a67a9993da82cf360583cc845568_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38b3a67a9993da82cf360583cc845568_JaffaCakes118
Size

30KB
MD5

38b3a67a9993da82cf360583cc845568
SHA1

e7eca230576fa38b06b8991f90e0301dc57e0a86
SHA256

4351a7c5b7dcf17cc9e92a1bba1da284ca5ca2d5944f3e67aed7ab3e8f9a5835
SHA512

98262fbaee196835c3dbb3e109d6c576f80c3ef844b1daba2a785bb87553acfacb7b3be3de04eaabe07ea573cdc70449f4567a21bee1e28d7386ccac860ead90
SSDEEP

768:IuLOp5z+CpZHRJWFUtuVw4yfhWQQNLeVh:IN4eWuh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b3a67a9993da82cf360583cc845568_JaffaCakes118

Files

38b3a67a9993da82cf360583cc845568_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3a8ba2b276052d3ddf3a2ddaec54919

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord631
ord632
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord607
ord717
ProcCallEngine
ord644
ord573
ord685
ord578
ord100
ord616
ord618

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ